$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/754c3b96-e56e-46e1-9e55-984c7c76101c.roa File: 754c3b96-e56e-46e1-9e55-984c7c76101c.roa (raw, json) Hash identifier: vC+3CD2JVCfG4dsZlctv57L59kBIFk58QdqXb/x2tIA= Subject key identifier: 8B:32:59:BE:6D:BD:C6:FF:27:5C:D3:FA:80:67:16:89:F6:8B:34:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31050F48354085481F04981C564E36657F4E0979 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/754c3b96-e56e-46e1-9e55-984c7c76101c.roa Signing time: Fri 19 Sep 2025 02:27:15 +0000 ROA not before: Fri 19 Sep 2025 02:27:15 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:05:0f:48:35:40:85:48:1f:04:98:1c:56:4e:36:65:7f:4e:09:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 02:27:15 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=102e82811e8ffb58067bd63f09cea0478e2eb14b3ff88ea40b241feda8c2d2a3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:a5:4a:1a:65:7a:bb:0e:05:47:3d:5d:48: dd:3a:26:4d:eb:89:44:43:aa:d6:4d:17:d4:aa:ff: c4:73:d2:30:fa:02:b4:57:10:34:e8:b2:f3:f6:59: 79:57:1b:6b:ee:2b:8a:12:50:f9:63:19:a9:56:fe: 91:5b:a5:10:3b:88:9b:df:77:b0:d4:5d:32:52:30: f2:e0:61:2b:32:3d:55:95:a3:20:40:35:09:6a:ef: cf:0a:8a:d3:f9:4d:df:e4:c5:dc:b9:07:fd:7c:6d: 9e:99:4f:3c:4a:78:1b:fb:29:7a:e0:38:41:7c:60: 2e:56:41:f6:26:4b:f9:58:c4:00:f8:ef:b2:16:0b: 61:70:b7:97:80:6f:43:bc:13:0f:25:0f:65:f1:5f: 4f:a9:97:f7:9b:dc:2c:f9:e4:e8:86:81:c3:5b:2c: 45:54:50:31:5b:48:1b:87:33:96:cc:2e:80:03:8d: a3:13:1e:48:d8:08:1a:d0:db:1c:b0:f2:8c:6a:33: 6c:1c:67:1f:d3:1d:15:04:a9:44:cf:0e:2c:e5:ec: 45:5a:67:4e:64:14:58:8d:9e:65:6a:63:d5:4a:9c: 75:ef:71:35:db:bd:ee:00:08:f5:06:a2:4a:6d:ac: 20:cb:82:9a:db:56:00:ea:2c:f9:87:b6:82:28:ba: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:32:59:BE:6D:BD:C6:FF:27:5C:D3:FA:80:67:16:89:F6:8B:34:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/754c3b96-e56e-46e1-9e55-984c7c76101c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.182.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:85:1d:8f:c3:63:19:3d:35:c1:65:34:f5:26:1d:76:2c:3e: 0d:08:4b:14:6f:d8:35:30:55:3a:5e:0c:29:8a:54:44:51:c9: e8:8f:a6:5b:37:b1:f9:21:94:79:65:ff:12:31:d9:93:aa:de: a5:e0:68:27:19:ba:5a:86:32:3f:ee:22:28:a9:91:26:b9:3e: 6a:d3:68:2c:a3:6b:11:fd:7f:a3:0a:78:d1:3b:39:bf:82:c8: b6:c7:21:55:13:57:79:3b:0d:30:63:1a:78:39:a9:21:6f:e2: 9a:30:ec:37:a2:51:b1:1f:77:1f:1f:2f:fa:87:c5:63:b6:8b: 00:4c:12:3a:30:6f:68:7b:ef:f5:e2:b9:58:c7:e5:77:d1:c2: 72:fc:41:71:df:e1:43:4f:5f:9e:dd:c2:bb:83:a2:25:1a:7d: 1e:14:c1:0a:d5:5b:ae:46:d7:66:d3:58:ac:73:34:f8:a7:18: ca:1b:2a:66:f0:df:97:10:9b:55:e6:d6:87:bd:76:9d:55:d2: f3:a5:36:12:37:6f:eb:37:95:08:45:a9:c4:f8:65:7d:93:14: ec:8e:3c:bf:c4:c4:51:9f:41:32:62:71:cf:68:e0:c4:b7:11: 92:47:0c:4c:23:f8:23:3f:87:9c:f2:23:2c:aa:3f:c8:70:7a: 21:87:f0:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMQUPSDVAhUgfBJgcVk42ZX9OCXkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDIyNzE1WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDJlODI4MTFlOGZmYjU4MDY3YmQ2M2YwOWNlYTA0Nzhl MmViMTRiM2ZmODhlYTQwYjI0MWZlZGE4YzJkMmEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSyaVKGmV6uw4FRz1dSN06Jk3riURDqtZNF9Sq/8Rz0jD6 ArRXEDTosvP2WXlXG2vuK4oSUPljGalW/pFbpRA7iJvfd7DUXTJSMPLgYSsyPVWV oyBANQlq788KitP5Td/kxdy5B/18bZ6ZTzxKeBv7KXrgOEF8YC5WQfYmS/lYxAD4 77IWC2Fwt5eAb0O8Ew8lD2XxX0+pl/eb3Cz55OiGgcNbLEVUUDFbSBuHM5bMLoAD jaMTHkjYCBrQ2xyw8oxqM2wcZx/THRUEqUTPDizl7EVaZ05kFFiNnmVqY9VKnHXv cTXbve4ACPUGokptrCDLgprbVgDqLPmHtoIouupJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUizJZvm29xv8nXNP6gGcWifaLNKwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1NGMzYjk2LWU1NmUtNDZlMS05ZTU1LTk4NGM3Yzc2MTAxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wLYwDQYJKoZIhvcNAQELBQADggEBAIuFHY/DYxk9NcFlNPUmHXYsPg0I SxRv2DUwVTpeDCmKVERRyeiPpls3sfkhlHll/xIx2ZOq3qXgaCcZulqGMj/uIiip kSa5PmrTaCyjaxH9f6MKeNE7Ob+CyLbHIVUTV3k7DTBjGng5qSFv4pow7DeiUbEf dx8fL/qHxWO2iwBMEjowb2h77/XiuVjH5XfRwnL8QXHf4UNPX57dwruDoiUafR4U wQrVW65G12bTWKxzNPinGMobKmbw35cQm1Xm1oe9dp1V0vOlNhI3b+s3lQhFqcT4 ZX2TFOyOPL/ExFGfQTJicc9o4MS3EZJHDEwj+CM/h5zyIyyqP8hweiGH8OI= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:24 2025 by rpki-client